Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub' disclosed a bug submitted by b'ajxchapman' 
b'[Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution'

16 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'Ability to bypass locked Cloudflare WARP on wifi networks.'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'RCE via github import'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'CSP-bypass XSS in project settings page'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'XSS: `v-safe-html` is not safe enough'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'cryptopone' 
b'New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact firstname/lastname fields'

16 Nov 2022

b'Acronis' disclosed a bug submitted by b'angeltsvetkov' 
b'Open redirect at mc-beta-cloud-acronis.com'

15 Nov 2022

b'Reddit' disclosed a bug submitted by b'41bin' 
b'Admin can create a hidden admin account which even the owner can not detect and remove and do administrative actions on the application.'

14 Nov 2022

b'Equifax' disclosed a bug submitted by b'valluvarsploit_h1' 
b'Subdomain takeover at http://test.www.midigator.com'

12 Nov 2022

b'Yelp' disclosed a bug submitted by b'racersaravanaa05' 
b'Subdomain Takeover on delivey.yelp.com '

12 Nov 2022

b'TikTok' disclosed a bug submitted by b'datph4m' 
b'Business Suite "Get Leads" Resulting in Revealing User Email & Phone'

10 Nov 2022

b'Reddit' disclosed a bug submitted by b'saibalajis6' 
b'sensitive data exposure'

10 Nov 2022

b'Reddit' disclosed a bug submitted by b'saibalajis6' 
b'api keys leaked'

10 Nov 2022

b'XVIDEOS' disclosed a bug submitted by b'cyber_anon' 
b'Host Header Injection Attack - www.xnxx.com'

08 Nov 2022

b'XVIDEOS' disclosed a bug submitted by b'j3rry4unt' 
b'Self-XSS on Suggest Tag dialog box'

08 Nov 2022

b'Aiven Ltd' disclosed a bug submitted by b'jarij' 
b'Apache Flink RCE via GET jar/plan API Endpoint'

08 Nov 2022

b'Aiven Ltd' disclosed a bug submitted by b'jarij' 
b'Kafka Connect RCE via connector SASL JAAS JndiLoginModule configuration'

08 Nov 2022

b'Aiven Ltd' disclosed a bug submitted by b'jarij' 
b'Grafana RCE via SMTP server parameter injection'

08 Nov 2022

b'Aiven Ltd' disclosed a bug submitted by b'jarij' 
b'[Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia'

08 Nov 2022

b'Yelp' disclosed a bug submitted by b'xinfohuggerx' 
b'Public Github Repo Leaking Internal Credentials '

07 Nov 2022

1 ... 139 140 141 142 143 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM